2025-05-15 Minutes of the Code Signing Certificate Working Group
Certificate Signing Certificate Working Group (CSCWG) – Meeting Minutes
Date: May 15, 2025
1. Antitrust Reminder
Martijn Katerbarg read the Note Well
2. Review of Agenda
No changes to the agenda.
3. Approve Prior Meeting Minutes
- March 20th Minutes – Approved without objections.
- April 17th Minutes – Approved without objections.
- F2F Meeting Minutes – Approved without objections.
4. Discussion Topics
CSC-29 / CSC-30 – Alignment with SCWG Ballots
- Discussion on aligning CSCWG Baseline Requirements with recent SCWG updates.
- Waiting for confirmation that Nate has been added as a voting member (confirmed).
- Corey noted feedback from Identrust regarding Section 8.7. Marco was expected to raise it on the list; Corey will follow up.
- Martijn suggested discussion can restart once circulated and comments addressed.
Maximum Validity for CS Certificates
- Nate mentioned a pull request has been created and asked for guidance on the process.
- Martijn recommended circulating the PR to the public mailing list and requesting feedback and endorsers.
- Nate mentioned Karina Sirota will be taking the lead for Microsoft moving forward; Martijn confirmed Karina is already a voting member.
PQC Draft Ballot
- Corey asked for status updates on feedback and endorsement.
- Nate confirmed the latest version looks good from Microsoft’s perspective; Karina will formally review.
- Brianca (Amazon) inquired about a second endorser; Sectigo has already endorsed.
5. Any Other Business
- No additional topics raised.
6. Next Meeting
- Scheduled for May 29, 2025.
- Martijn encouraged participants to bring forward any face-to-face discussion topics ahead of time.
7. Adjourn
Attendees
Brianca Martin (Amazon), Brian Winters (IdenTrust), Bruce Morton (Entrust), Corey Bonnell (DigiCert), Inaba Atsushi (GlobalSign), Iñigo Barreira (Sectigo), Karina Sirota (Microsoft), Kateryna Aleksieieva (Asseco Data Systems SA (Certum)), Luis Cervantes (SSL.com), Martijn Katerbarg (Sectigo), Nate Santiago (Microsoft), Nome Huang (TrustAsia), Rebecca Kelly (SSL.com), Scott Rea (eMudhra), Thomas Zermeno (SSL.com)